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This listing of claims will replace all prior versions, and listings, of claims in the application: 




Claim 1 (currently amended): Method of payment by electronic cheque between a 
payment issuer furnished with a medium (1) comprising at least one blank electronic cheque 
certified by a financial institution (BA) and an overall amount useable at least partially in respect 
of the electronic cheque, and a recipient of the payment furnished with a device (3) adapted to 
receive at least one aforesaid electronic cheque of the abovementioned medium (1), said method 
comprising the steps of: 

calculating by the medium (1) of a table (5), possibly partial, on the basis of at least one 
set of k base values (S[l] ? . . . S[k]), by applying successively to each of them n times an 
irreversible function (OWF) with parameter(s) differing preferably with each application and 
giving k intermediate values n times , wherein said irreversible function is a function from which 
it is easy to compute the output for a given input, but it is computationally infeasible to compute 
for a given output an input which maps to the given output ; 

calculating by the medium (1) of a secret key (SK) on the basis of the last k intermediate 
values of order n and, on the basis of this key (SK), a calculation of a distinctive sign (IM cf ) of 
the cheque; 

transmitting by the medium (1) to the devise (3) the distinctive sign (IM C f) calculated for 
the electronic cheque; 

generating a financial commitment by the medium (1) in relation to the device (3), as 
regards the cheque by supplying to the device (3): 

a first result (0_AC_I) of an irreversible function (OWF) via which was 
processed the result (AC_I) of a first algorithm (MAC) combining a secret verification key 
(SVK), originating from the financial institution (BA) issuing the electronic cheque, and 
dynamic parameters (CDP) of this cheque, and 

a second result (AC_C) of a second algorithm (MAC) combining the secret key 
(SK) calculated for the medium, the dynamic parameters (CDP) of this cheque and the first result 
(0_AC_I) hereinabove; 
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generating by the device (3), at least one random/pseudo-random guesstimation of k 
numbers m of successive applications of the irreversible function (OWF) to the k base values 
(S[l],...S[k]), the k numbers m lying between zero and n and possibly being different from one 
another, the sum of the k numbers m having to be a determined constant; 

transmitting by said device the result of the guesstimation to the medium (1); 

responding by the medium (1) to said guesstimation by the device (3), comprising the 
result (AC_I) of the first algorithm combining the secret verification key (SVK) and the dynamic 
parameters (CDP) of the cheque and, a set of the k intermediate values obtained during the 
successive applications of the irreversible function (OWF) to each of the k base values 
(S[l] 9 . . .S[k]) the number or numbers of times m lying between zero and n; 

successively applying, by said device, the irreversible function (OWF) to each of the k 
intermediate values of order(s) m until the last k intermediate values of order n are obtained; 

calculating of the said secret key (SK), by said device, on the basis of these last k 
intermediate values of order n and, on the basis of this secret key (SK), a calculation of the 
distinctive sign (IM cf ) of the cheque; 

comparing, by said device, the distinctive sign (IM c f) thus calculated and of the 
distinctive sign (IM cf ) calculated by the medium (1) and received from the latter; and 

verifying by calculation and comparison in the device (3) of the said second result 
(AC_C) of the second algorithm (MAC) and of that received from the medium (1); 

verifying by calculation and comparison in the device (3) of the said first result 
(0_AC_I) of an irreversible function (OWF) and of that received from the medium (1), wherein, 
if the said comparison and verifications each give equality, an acceptance and a storage by the 
device (3) of the electronic cheque issued by the medium (1), thereby, allowing the devise (3) to 
recognize the authenticity of the medium (1) and of the cheque being received. 

Claim 2 (previously amended): Method according to claim 1, characterized in that the 
sum of the k numbers m is a constant equal to n*k/2 if the product n*k is even or, if this product 
isodd,to(n*k-l)/2. 

Claim 3 (previously amended): Method according to claim 1, characterized in that it 
comprises: 

- a storage in the medium (1) of at least one electronic cheque template (CF) useable to make at 
least one aforesaid cheque, 
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- a transmission by the medium (1) to the device (3) of: 

- a series of h distinctive signs (IMcF[l---h]) of a cheque, each associated with a distinct 
set of k base values (S[l],...S[k]) contained in the medium (1), 

- an index (i), lying between 1 and h, for designating a particular distinctive sign 
(IMcF[i]) from among the h aforementioned distinctive signs, 

- a digital signature (SIGNcf) produced by the issuing financial institution (BA) so as to 
guarantee the said distinctive signs (IM C f[1 . • -h])> and 

- a use by the device (3), for the said comparison, of the particular distinctive sign (IMcfW) 
determined by the index (i) in the guise of distinctive sign (IMcF) received from the medium 
(1), and 

- a verification by the device (3) of the said digital signature (SIGN C f) by means of a public key 
(PK B ) known to the device (3). 

Claim 4 (previously amended): Method according to claim 1, characterized 

- in that it comprises, in respect of the transaction, a transmission by the medium (1) to 
the device (3) of non-secret data which may be the identification (ID B ) of the financial 
institution (BA) which certifies the electronic cheque and, as appropriate, the public key (PK B ) 
of the issuing financial institution (BA) and a certificate (CERT B ) of this public key (PK B ) 
issued by a certificate authority (CA), and 

- in that the device verifies in this case the authenticity of the said certificate (CERT B ) 
by means of another public key (PK C a), known to the device (3), of the certificate authority 
(CA). 

Claim 5 (previously amended): Method according to claim 1, characterized in that the 
medium (1) can be reloaded as regards its overall amount and/or its number (i) of electronic 
cheques in the course of a link with the abovementioned financial institution (BA) or one of its 
delegates. 

Claim 6 (previously amended): Method according to claim 1, characterized in that it 
comprises, for the calculation of the table (5) by the medium (1), a mother base value (SD C f) 
common to each column (L.k) of the table (5), and an application to this mother base value of 
at least one irreversible function (SOWF) preferably with different parameter(s) for each 
column (l.,.k). 
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Claim 7 (original): Method according to claim 5, characterized in that in the course of a 
reloading of the medium (1), it is furthermore supplied with an identification (ED C f) of cheque 
templates, updated abovementioned static parameters (SPcf), a series of h distinctive signs 
(IMcF[l.-h]), an abovementioned digital signature (SIGNcf) and a determined number of base 
values (S[l],...S[k]) or, as appropriate, of at least one aforesaid common base value (SD C f). 

Claim 8 (previously amended): Method according to claim 1, characterized in that the 
device (3) records, during a transaction, the result (AC_I) of the first algorithm and/or, as 
appropriate, an identification (ID B ) of the aforesaid financial institution (BA) and/or an 
identification (ID C f) of the template of the electronic cheque received and/or the identification 
(IDc) of the medium (1). 

Claim 9 (previously amended): Method according to claim 1, characterized 

- in that in respect of incremental payments of the kind by telephone card, the dynamic 
parameters (CDP) of the cheques moreover comprise: 

- the amount or the sequence of amounts corresponding to the authorized incremental 
payments, 

- a base chaining value (Zo), 

- a chaining of successive values (Zj) which each stem successively from the application 
of an irreversible function to the immediately following value (Zj+i), and 

- in that after having performed with the hereinabove device (3) a protocol for payment by 
electronic cheque, the medium (1) can perform an incremental payment by supplying the 
receiving device (3) with successive chaining values (Zj, Z 2 , Z 3 , . . . ), the device (3) preserving a 
record of the last value (Zj) received and of the corresponding index (j). 

Claim 10 (previously amended): Method according to claim 1, characterized in that it 
comprises a cancellation of a transaction of payment by cheque from the medium (1) to the 
device (3). 

Claim 11 (original): Method according to claim 10, characterized in that it comprises "in 
respect of the aforementioned cancellation, 

- a storage, in the device (3), of at least one electronic cheque template, issued by the 
financial institution (BB) of the device (3), and of secret data relating to this template, 

- a programming of the medium (1) in such a way that the latter cannot receive a payment 
by cheque other than from the device (3) to which a transaction was previously paid by means of 
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the said medium (1) the latter storing the cancellation payment cheque until the medium (1) is 
presented to its corresponding financial institution (BA), in particular for a reloading of the 
medium (1). 

Claim 12 (previously amended): Method according to claim 1, characterized in that it 
furthermore comprises steps of inverse authentication via which the medium (1) can for its part 
recognize the authenticity of the device (3). 

Claim 13 (original): Method according to claim 12, characterized in that the steps of 
inverse authentication are of the same kind as those for the authentication of the medium (1), 
whilst requiring, as appropriate, only a single distinctive sign (IM C f) of electronic cheque 
template. 

Claim 14 (previously amended): Method according to claim 12, characterized in that it 
comprises, for at least some of the inverse authentication steps, the use of an element (7) for 
communication between the medium (1) and the device (3), this communication element (7) 
preferably being held by the payment issuer which holds the said medium (1). 

Claim 15 (previously amended): Method according to claim 1, characterized in that it 
comprises, in the medium (1), a combination of each of the various distinctive signs (IM C F[i]), at 
a first level, by means of irreversible functions (OWHF) each time with another value or another 
distinctive sign (IMcF[i']), in that the results (Vi, V 2 ; V 3 , V 4 ) of each pair of applications of the 
irreversible function (OWHF) are combined at a second level via another application of the 
irreversible function (OWHF) so as to give new results (V 5 , V 6 ) to be combined at a third level 
via one or other applications of the irreversible function (OWHF) and so on and so forth until a 
single result (0_IM C p) is obtained, and which is signed as deduced distinctive sign, by the digital 
signature (SIGNcf) so as to sign the cheques issued. 

Claim 16 (original): Method according to claim 15, characterized in that it comprises, for 
a verification by the device (3) of the deduced distinctive sign (0_IMcf), a transmission from the 
medium (1) each time of the second distinctive sign (IMcf[i]) used in a first combination 
(OWHF) at the first level and, at each succeeding level, of the intermediate result (V 2 , Ve) of the 
irreversible functions (OWHF), which is used so as to be combined successively with the 
corresponding intermediate result (Vi, V5) obtained on the basis of the second distinctive sign 
(IM C F[i]) ? until the deduced distinctive sign (O-IMcf) is obtained. 
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Claim 17 (previously amended): Payment system for implementing the method according 
to claim 1 , characterized in that it comprises 

- at least one medium (1) furnished 

- with means for storing at least 

- a blank electronic cheque certified by a financial institution (BA), 

- an overall amount useable at least partially in respect of the electronic cheque, 

- at least one distinctive sign (IM C f) for this cheque, which may be included in the latter, 

- at least one set of k base values (S[l],...S[k]) which may be derived from a single mother value 
(SDcf), 

- a secret verification key (SVK) originating from the financial institution (BA) issuing the 
electronic cheque, and 

- dynamic parameters (CDP) of the said cheque, 

- with means of calculation 

- of a table (5) on the basis of the k base values (S[l],...S[k]) 5 by applying successively to each 
of them n times an irreversible function (OWF) with parameter(s) differing preferably with each 
application and giving k intermediate values n times, 

- of a secret key (SK) on the basis of the last k intermediate values of order n and, on the basis of 
this key (SK), of a distinctive sign (IM C f) of the cheque, 

- of a first result (0_AC_I) of an irreversible function (OWF) via which was processed the result 
(AC J) of a first algorithm (MAC) combining the secret verification key (SVK) and dynamic 
parameters (CDP) of the cheque, and 

- of a second result (AC_C) of a second algorithm (MAC) combining the secret key (SK) 
calculated for the medium (1), the dynamic parameters (CDP) of this cheque and the first result 
(0_AC_I) hereinabove, and 

- with means of direct dialogue with at least one device (3) adapted to receive at least one 
aforesaid electronic cheque from the abovementioned medium (1) and among other things the 
distinctive sign (IMcf) of the said cheque, 

- the device (3) being equipped 

- with means of random/pseudo-random guesstimation of k numbers m of successive 
applications of the irreversible function (OWF) to the k base values (S[l],...S[k]), the k numbers 
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m lying between zero and n and possibly being different from one another, the sum of the k 
numbers m having to be a determined constant, 

- with means of direct dialogue corresponding to those of the medium (1), so as among 
other things to carry out a transmission of the result of the guesstimation to the medium (1), 

- with means of calculation 

- successively applying the irreversible function (OWF) to each of the k intermediate values of 
order m until the last k intermediate values of order n are obtained, 

- of the said secret key (SK) on the basis of these last k intermediate values of order n and, on the 
basis of this secret key (SK), a calculation of the distinctive sign (IMcf) of the cheque, 

- means of comparison of the distinctive sign (IMcf) thus calculated and of the distinctive 
sign (IMcf) calculated by the medium (1) and received from the latter, 

- means of verification by calculation and comparison of the said second result (AC_C) 
of the second algorithm (MAC) and of that received from the medium (1), 

- means of verification by calculation and comparison of the said first result (0_AC_I) of 
an irreversible function (OWF) and of that received from the medium (1) and, 

- means of storage of at least the electronic cheque issued by the medium (1), if the said 
comparison and verifications each give equality. 

Claim 18 (original): System according to claim 17, characterized in that: 

- the means of storage of the medium (1) are devised so as to store at least one electronic cheque 
template (CF) useable to make at least one aforesaid cheque, 

- the means of dialogue of the medium (1) are devised so as to transmit to the device (3): 

- a series of h distinctive signs (M C F[l.-.h]) of a cheque, each associated with a distinct 
set of k base values (S[l],...S[k]) contained in the medium (1), 

- an index (i), lying between 1 and h, for designating a particular distinctive sign 
(IMcF[i]) from among the h aforementioned distinctive signs, 

- a digital signature (SIGNcf) produced by the issuing financial institution (BA) so as to 
guarantee the said distinctive signs (IMcF[l...h]), and 

- the device (3) is devised so as to use, for the said comparison, the particular distinctive sign 
(IM C F[i]) determined by the index (i) in the guise of distinctive sign (IM C f) received from the 
medium (1), and 
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- the device (3) comprises means of calculation devised so as to verify the said digital signature 
(SIGNcf) by means of a public key (PK B ) known to the device (3). 

Claim 19 (original): System according to claim 18, characterized in that: 

- the means of dialogue of the medium (1) are devised so as to transmit to the device (3) 
non-secret data which may be the identification (ID B ) of the financial institution (BA) which 
certifies the electronic cheque and, as appropriate, the public key (PK B ) of the issuing "financial 
institution (BA) and a certificate (CERT B ) of this public key (PK B ) issued by a certificate 
authority (CA), and 

- the device is devised so as to verify the authenticity of the said certificate (CERT B ) by 
means of another public key (PKca), known to the device (3), of the certificate authority (CA). 

Claim 20 (previously amended): System according to claim 17, characterized in that it 
comprises as medium (1) a payment card (2) of the integrated circuit type and as device (3) a 
payment terminal (4) with reading and writing for a card (2) of this type. 

Claim 21 (original): System according to claim 20, characterized in that it comprises as 
medium (1) a payment card (2) of the integrated circuit type and as device (3) a payment 
terminal (4) with reading and writing for a card (2) of this type and furnished with means of 
transferring data received from the said card (2), and/or processed by the terminal (4), into 
storage means (6) detachable from the terminal (4) proper and in particular transportable to a 
financial institution (BB) so as to perform therein a transfer of the said data. 

Claim 22 (original): System according to claim 20, characterized in that, in particular in 
the case where the device (3) is remote from the issuer of the payment and/or in the case of steps 
of inverse authentication of the device (3) by the medium (1), the abovementioned medium (1) is 
composed among other things, on the one hand, of the aforesaid integrated circuit card (2) and, 
on the other hand, of a communication element (7), for dialogue between the card and the said 
device (3). 



Claim 23 (currently amended): A method of offline payment by electronic check between 
a payment issuer furnished with a medium comprising at least one blank electronic check 
comprising a message authentication code algorithm and a set of irreversible functions, wherein 
an irreversible function is a function from which it is easy to compute the output for a given 
input, but it is computationally infeasible to compute for a given output an input which maps to 
the given output; and a recipient of the payment furnished with an electronic check receiving 



Page 9 of 15 



Application No. 09/492,307 
Amdt. dated July 18, 2003 
Reply to Office Action of May 7, 2003, and Examiner's interview of June 17, 2003 

device adapted to receive said electronic check of said medium, said electronic check receiving 
device comprising said message authentication code algorithm and said set of irreversible 
functions, said method comprising the steps of: 

calculating by said medium a secret key and a distinctive sign of said 
electronic check, said calculation based on the use of said message authentication 
code algorithm and application of said set of irreversible functions; 

transmitting by said medium to the electronic check receiving device said 
distinctive sign; 

generating by said medium: a first authentication code, a financial 
commitment value, and a second authentication code; said second authentication 
code obtained by applying said message authentication code algorithm to said 
financial commitment value with said secret key; 

transmitting by said medium said financial commitment value and said 
second authentication code to said electronic check receiving device; 

generating by said electronic check receiving device, in response to said 
financial commitment value, a challenge, said challenge based on the application 
of said set of irreversible functions; 

transmitting by said electronic check receiving device said challenge to 
said medium; 

generating by said medium, in response to said challenge, a response 
based on the application of said set of irreversible functions; 

transmitting by said medium said first authentication code and said 
response to said electronic check receiving device, in response to said challenge 
received from said electronic check receiving device; 

calculating, by said electronic check receiving device, said secret key of 
said electronic check and the distinctive sign of said electronic check by applying 
said set of irreversible functions to said response; 

comparing, by said electronic check receiving device, the distinctive sign 
calculated by said electronic check receiving device and the distinctive sign 
received from said medium; 
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verifying by calculation and comparison by said electronic check 
receiving device, said financial commitment value and said second authentication 
code, said verifying based on use of said secret key, wherein, if said comparison 
and verifications each give equality, said electronic check issued by said medium 
is accepted and stored by said electronic check receiving device, thereby, 
allowing said electronic check receiving device to recognize the authenticity of 
the medium and of the electronic check being received. 



Claim 24 (previously added): The method according to claim 23, wherein said first 
authentication code is generated via said message authentication code algorithm and based upon 
said secret key and dynamic parameters of said electronic check. 

Claim 25 (previously added): The method according to claim 23, wherein said financial 
commitment value is generated via application of said set of irreversible functions and based 
upon said first authentication code. 

Claim 26 (previously added): The method according to claim 23, wherein said second 
authentication code is generated via said message authentication code algorithm and based upon 
said secret key, dynamic parameters of said electronic check, and said financial commitment 
value. 

Claim 27 (previously added): The method according to 23, wherein said set of 
irreversible functions are chosen from the group consisting of: a first parametrized irreversible 
function; a second parametrized irreversible function; and, an irreversible compression function. 

Claim 28 (currently amended): A system for offline payment by electronic check, said 
system comprising: 

an electronic check medium, said electronic check medium comprising: 
an electronic check template; 
a message authentication code algorithm; 

a set of irreversible functions , wherein an irreversible function is a function from 
which it is easy to compute the output for a given input, but it is computationally 
infeasible to compute for a given output an input which maps to the given output ; 
a set of base values associated with distinctive signs; 
a secret key; 

an identifier of said electronic check medium's bank; 
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a first public key of said electronic check medium's bank; and 
a first public key certificate; 
an electronic check receiving device, said electronic check receiving device comprising: 
said message authentication code algorithm; 
said set of irreversible functions; 

a second public key of said electronic check receiving device's bank; and 
a second public key certificate. 
Claim 29 (previously added): The system according to claim 28 wherein said set of 
irreversible functions is chosen from the group consisting of: a first parametrized irreversible 
function; a second parametrized irreversible function; and, an irreversible compression function. 

Claim 30 (previously added): The system according to claim 29 wherein said electronic 
check template comprises: (1) an identifier of said electronic check template, (2) an identifier of 
said electronic check medium, (3) static parameters, (4) a series of distinctive signs, and (5) a 
digital signature from said electronic check medium's bank. 

Claim 31 (previously added): The system according to claim 30, wherein said electronic 
check medium transmits to electronic check receiving device: (1) said electronic check template; 
(2) said identifier of said electronic check medium's bank; (3) said first public key of said 
electronic check medium's bank; (4) said first public key certificate; and (5) an index associated 
with said series of distinctive signs to indicate which distinctive sign to use. 

Claim 32 (previously added): The system according to claim 31, wherein said electronic 
check receiving device verifies (1) said first public key certificate, and (2) said digital signature 
from said electronic check medium's bank. 

Claim 33 (previously added): The system according to claim 32, wherein said electronic 
check medium calculates: 

a first authentication code via said message authentication code algorithm, 
based upon a secret verification key and dynamic parameters of said electronic 
check; 

a financial commitment value via application of said set of irreversible 
functions, based upon said first authentication code; and 

a second authentication code via said message authentication code 
algorithm, based upon said secret key, said dynamic parameters of said electronic 



Page 12 of 15 



Application No. 09/492,307 

Amdt. dated July 18,2003 ♦ 

Reply to Office Action of May 7, 2003, and Examiner's interview of June 17, 2003 

check, and said financial commitment value, wherein said electronic check 
medium transmits said second authentication code and said financial commitment 
value to said electronic check receiving device. 
Claim 34 (previously added): The system according to claim 33, wherein said electronic 
check receiving device calculates at least one challenge via application of said second set of 
irreversible functions for the purpose of verifying said electronic check medium and transmits 
said challenge to said electronic check medium. 

Claim 35 (previously added): The system according to claim 34, wherein said electronic 
check medium transmits a response and said first authentication code to said electronic check 
receiving device in response to said challenge received from said electronic check receiving 
device. 

Claim 36 (previously added): The system according to claim 35, wherein said electronic 
check receiving device: 

calculates a second distinctive sign via application of said set of 
irreversible functions; 

verifies whether said second distinctive sign corresponds with said 
distinctive sign based on said index received from said electronic check medium; 
and 

verifies said first authentication code and said financial commitment value 
received from said electronic check medium, wherein, if the said verifications 
each give equality, said electronic check issued by said electronic check medium 
is accepted and stored by said electronic check receiving device, thereby, 
allowing said electronic check receiving device to recognize the authenticity of 
said electronic check medium and of said electronic check being received. 
Claim 37 (currently amended): A system for offline payment by electronic check, said 
system comprisinR: 

Aan electronic check medium , said electronic check medium comprising: 
an electronic check template; 
a message authentication code algorithm; 



Page 13 of 15 



Application No. 09/492,307 
Amdt dated July 18, 2003 
Reply to Office Action of May 7, 2003, and Examiner's interview of June 17, 2003 

a set of irreversible functions , wherein an irreversible function is a function from 
which it easy to compute the output for a given input, but it is computationally infeasible 
to compute for a given output an input which maps to the given output ; 

a set of base values associated with distinctive signs; 

a secret key; 

an identifier of said electronic check medium's bank; 

a first public key of said electronic check medium's bank; and 

a first public key certificate. 
Claim 38 (previously added): The system according to claim 37 wherein said set of 
irreversible functions is chosen from the group consisting of: a first parametrized irreversible 
function; a second parametrized irreversible function; and, an irreversible compression function. 
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